OliveTin logo

OliveTin

Website

Web interface to run predefined shell commands securely

3.8k stars 136 forks last commit first released AGPL-3.0

Actively maintained

Last commit 11 Aug 2026.

OliveTin screenshot

OliveTin is a self-hosted web application that exposes predefined shell commands through a responsive Single Page UI and an API. It uses a simple YAML configuration to define actions, dashboards and entities so administrators can make complex or dangerous commands safe and repeatable.

Key Features

  • YAML-based configuration-as-code for actions, entities and dashboards, with live-reloadable options
  • Responsive, touch-friendly Single Page App UI (light/dark modes) designed for tablets and mobile
  • Action system: parameterised commands, timeouts, scheduled (cron) executions and execution logs
  • Security model with multiple authentication options (local users, OAuth2, JWT, trusted headers) and ACL-based authorization per-action
  • Multiple integration points: REST API / webhook endpoints and URL-based triggers for automation and streamdeck/QR integrations
  • Container images, packages and Helm chart available for easy deployment; small resource footprint (Go backend)
  • Accessibility-focused frontend and configurable UI theming and custom JS support

Use Cases

  • Provide non-technical users (family, junior admins) one-click buttons to restart services or run maintenance scripts
  • Trigger complex or long-running server operations from mobile devices or dashboards without giving shell access
  • Integrate server commands into automation flows via webhooks, API calls or scheduled tasks (cron)

Limitations and Considerations

  • Actions and dashboards are primarily defined in YAML configuration files; adding or editing actions requires editing config files (configuration-as-code), which may be less convenient for non-technical administrators
  • Because OliveTin executes arbitrary shell commands, correct security configuration is essential; misconfigured authentication/ACLs can expose powerful operations
  • Accounting/auditing for action executions is provided via logs but the documentation notes this area is less mature and may require additional operational procedures

OliveTin is intended for administrators who want a simple, auditable way to expose repeatable server operations without granting interactive shell access. It emphasizes safety, minimal resource usage and flexible integration via API and configuration.

Categories:

Tags:

Tech Stack:

Share:

Similar to OliveTin

Cert Warden logo

Cert Warden

Centralized ACME certificate manager with REST API and UI

602
25
Last commit

Open-source centralized ACME client to manage TLS certificates with automated renewals, API-key retrieval for clients, http-01/dns-01 challenge support, Go backend and React UI.

Actively maintained
Alternative to:
Caddy Cloud logo
Caddy Cloud
+5
Kottster logo

Kottster

Self-hosted Node.js admin panel builder for databases

1.2k
81
Last commit

Kottster is an open-source, self-hosted Node.js admin panel that generates table views, dashboards, and custom pages on top of your existing database.

Apache-2.0Slowing down
Alternative to:
Retool logo
Retool
+5
Soft Serve logo

Soft Serve

Self-hosted Git server with an SSH-accessible terminal UI

7.2k
238
Last commit

Self-hostable Git server focused on SSH, featuring a terminal UI, access control, and Git LFS support, with cloning via SSH, HTTP, or the Git protocol.

MITActively maintained
Alternative to:GitHub+7

ChiefOnboarding

Free and open-source employee onboarding platform for Slack or web

926
162
Last commit

Open-source onboarding platform to provision accounts, run preboarding, to-dos, resources, courses, and badges via Slack or a dashboard.

AGPL-3.0Actively maintained
Alternative to:
Sapling (Kallidus) logo
Sapling (Kallidus)
+2
UpSnap logo

UpSnap

Wake-on-LAN web app for waking and managing network devices

6.2k
248
Last commit

UpSnap is a simple Wake-on-LAN web app with a device dashboard, scheduling via cron, port checks, and optional network discovery for managing machines on a LAN.

MITActively maintained
Alternative to:
IFTTT logo
IFTTT
+3

Pomerium

Identity- and context-aware access proxy for zero trust access

5k
350
Last commit

Pomerium is an identity-aware access proxy that provides zero trust, per-request authorization to internal web apps and services without a traditional VPN.

Apache-2.0Actively maintained
Alternative to:
Cloudflare Access logo
Cloudflare Access
+12